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Insider Threat 



Insider Threat 



• A person with authorized access to 
information, facilities, technology or 
personnel who . . . 

— Utilizes his/her access with intention 
of providing information, technology 
or access to unauthorized persons 

and/or 

— Maliciously manipulates or causes 
damage or harm to an organization, 
its information, facilities, technology 
or persons 

- The Unwitting Insider: Targeted for 
compromise at home and abroad 




Insider Threat: Why? 



• Compromise 

• Revenge 

• Ideology 

• Money 

• Ego 


C.R.I.M.E. 


TRUSTED INSIDER 
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Economic spying case over DuPont’s 
chemical grows 


PAUL E-UAS, AssocMed Pmss 



SAN: FRANCISCO' (AP) — The 
Chinese ca:l} t "Titaniuiimi white.'" And it 
does matee; f Tinny things while, frorn; 
Sie inside of Oreo cookies to the 
ipaint on cars.. Paper, toothpaste, 
plastics, cosmetics and j«st about 
:any other com;m:onpla;ce :ile:nn colored 
white includes titaniunrii dioxide., 

S's a 1 17 billiorii-a^year ind:u:stry' andl 
hO' one: makes the whitener :petter 
than DuPont, which has been in the 
titanium dioxide business for 70 
yea:rs and controis 2:0 percent of the 
world market.. 

China; carVt get enough; of the stuS 
and buys more from the We.st than it 
makes dome-sticaiy.. So, U.S.. 
prosecutors say, Chiinese 
Communist leaders decreed tha^ 
duplicating — or ototainingi — 
DuPo:nt's manufacturing method: was 
a nationai economic and: scientific 
imperative.. 

As Du:Pont was unwilng: to sell its 
method to Chi:na, the Chiinese 



Chriistiina Li«w walks out of a 
federal courthouse m San 


Francisco, Thursday, ^arch ®, 
2012. Liew, who is accused of 
helping her husband Walter 
Liew steal trade secrets from 
DuPont and selting thein to a 
company owned by the 
Chinese government, pleaded 
not guilty to econonric 
espionage charges In San 
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Why to report? 

•You are a victim, we need your assistance. 

•Recovery of trade secret and proprietary info. 

• To identify other possible sources of theft. 

• To identify and correct vulnerabilities. 

•Prevent future IP loss. 

•Use as a “teachable moment” for employees and managers. 
•Protect your brand and company reputation. 

•Be a leader in your industry. 



•Increase reporting. 


Insider Threat: 
Best Practices 



• Be aware of potential issues and exercise good judgment 
in determining what and when to report them. 

• Post signs notifying employees of security regulations. 

• Use computer banners that employees must click to 
acknowledge computer security issues. 

• Have employees sign non-disclosure and other security 
agreements. 

• Have yearly security and ethics training to emphasize 
what employees should be reporting. 

• Maintain computer/information access logs. 

• Have some type of pre-employment screening process in 
place. 

• Insure that there are clear internal reporting channels 
(anonymous) and that these are communicated to your 
workforce. 
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